ICO call for views on a data protection and journalism code of 
practice 


Introduction 


The Information Commissioner is calling for views on a data protection and journalism code 
of practice (the code). 


The Data Protection Act 2018 requires the Commissioner to produce a code of practice that 
provides practical guidance and promotes good practice in regard to processing personal 
data for the purposes of journalism. Our intention is for the code to provide practical, 
pragmatic guidance for journalists on how to comply with data protection legislation, building 
on the detailed guidance that we have already produced for this sector. 


This call for views is the first stage of the consultation process. The Commissioner is seeking 
input from relevant stakeholders, including media organisations, trade associations, data 
subjects and those representing the interests of data subjects. We will use the responses we 
receive to inform our work in developing the code. 


The Information Commissioner welcomes feedback on the specific questions set out below. If 
you would like further information on the call for views, please read our blog post here (link 
to blog post), or email journalismcode@ico.org.uk. 


The call for views will be open until Friday 17th May 2019. 
Privacy statement 


For this consultation we will publish all responses except for those where the respondent 
indicates that they are an individual acting in a private capacity (e.g. a member of the 
public). All responses from organisations and individuals responding in a professional 
capacity (e.g. academics, freelance journalists, sole traders, legal professionals) will be 
published. We will remove email addresses and telephone numbers from these responses 
but apart from this we will publish them in full. 


For more information about what we do with personal data please see our privacy notice. 


Please note that we are using the platform Snap Surveys to gather this information. Any 
data collected by Snap Surveys for ICO is stored on UK servers. You can read their Privacy 
Policy here. 


Section 1: Your views on the code 


Qi We are considering using our current guidance "Data protection and journalism: a 
guide for the media” as the basis on which we will build the new journalism code. Do 
you agree or disagree with this approach? 


@ Agree 


(J Disagree 


Q2 


Q3 


If you disagree , please explain why? 
N/A 


"Data protection and journalism: a guide for the media” is split into three sections: 
-“Practical guidance” aimed at anyone working in the journalism sector; 


Technical guidance” aimed at data protection practitioners within media 
organisations; and 


Disputes”, aimed at senior editors and staff responsible for data protection 
compliance. 


Do you think we should retain this structure for the code? 


O Yes 


No 


Q4 If no, do you have any suggestions about how we should structure the code? 
N/A 


Q5 Do you think the ICO’s existing guidance for journalists addresses the main areas 
where data protection issues commonly arise? 


| Yes 
~) No 


Q6 If no, what additional areas would you like to see covered? 


Q7 


The journalism code will address changes in data protection law, including 
developments in relevant case law. Are there any particular changes to data 
protection law that you think we should focus on in the code? 


We would refer to the submission by the Media Lawyers Association ("MLA") to this 
call for views which Reach plc approves of and supports. This response is in addition 
to the submission by the MLA. It has been our experience that Subject Access 
Requests (SARs) can, and are, being used by people to prevent or frustrate freedom 
of expression as opposed to the data subject genuinely being interested in finding out 
what data is being processed about them by a particular media organisation. Given 
that responding to SARs can involve considerable time and resources the ICO might 
like to consider including in the code of practice guidance on how such SARs - which 
are essentially designed to frustrate freedom of expression - should be treated. 


Q8 


Apart from recent changes to data protection law, are there any other developments 


that are having an impact on journalism that you think we should address in the 
code? 


The dominance of the social media platforms and the widespread availability of 
material online is having a considerable impact on the business of journalism as is 
the need to respond to those changes / challenges by increasing the speed of 
publication. This is the modern reality of journalism and in order for the code of 
practice to be of practical use in safeguarding "the special importance of the public 
interest in the freedom of expression and information" (s.124(5)(b) Data Protection 


Act 2018) it should accommodate this reality. This is of particular relevance in 
relation to record keeping. 


Q9 Are there any case studies or journalism scenarios that you would like to see included 
in the journalism code? 


No 


Q10 Do you have any other suggestions for the journalism code? 


Section 2: About you 


Are you? 


Q11 Are you? 
@ A media organisation? 
) A trade association? 
._) An organisation representing the interests of data subjects? 
_.) An academic? 
) An individual acting in a professional capacity? 
_) An organisation that regulates press standards? 


, An individual acting in a private capacity (e.g. someone providing their views as a 
” member of the public)? 


`) Other? 
Please specify: 


Q12 How did you find out about this survey? 
) ICO website 
) Social media 
Conference/seminar 
`) Trade/professional association 
) Media 
) Word of mouth 


@ Other? 
Please specify: 


Reach plc 


We may want to contact you about some of the points you have raised. If you are 
happy for us to do this please provide your email address: 


Thank you for taking the time to share your views and experience. 


